Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: 3TIpes0QRuEgBhNMo4Fe87R3doCYr7w3bTaz/xWcMAY=
Subject key identifier: 31:03:9D:60:42:C5:F8:30:12:54:C3:8C:03:67:FA:22:36:91:77:80
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 019778D3E2D7F51CB0FF50DDB8E0A9133775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 159A
Signing time: Mon 16 Jun 2025 13:00:41 +0000
Manifest this update: Mon 16 Jun 2025 13:00:41 +0000
Manifest next update: Tue 17 Jun 2025 13:00:41 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: bdhy/yz+7s+cYXuyfafoUw10wUB2jI9wqPqkXK0hpRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:e2:d7:f5:1c:b0:ff:50:dd:b8:e0:a9:13:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Jun 16 13:00:41 2025 GMT
Not After : Jun 17 13:00:41 2025 GMT
Subject: CN=31039d6042c5f8301254c38c0367fa2236917780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:aa:94:e5:3e:58:02:95:c7:ff:63:9f:d4:
6d:5c:79:df:2a:7e:69:82:bc:a3:a3:d1:37:2c:87:
d8:28:70:af:60:20:16:03:aa:d0:7e:bd:5b:c7:e0:
ef:c1:65:a5:9f:1f:ea:a3:98:ea:b0:fe:4a:d2:0d:
fd:c5:6b:8d:27:4d:fc:fb:ca:f8:4a:a9:a9:47:73:
44:1d:da:66:f3:90:dd:1b:01:33:30:ed:05:b3:81:
32:f7:a3:66:7d:83:8f:44:4b:c6:1e:e6:59:e4:12:
8b:41:5a:39:11:8d:e6:b7:3c:f4:8f:2b:38:99:7f:
8a:3b:90:7d:cd:97:a1:15:94:c0:b2:7b:d2:1d:76:
4f:de:ce:a5:5f:08:78:06:b9:26:4c:d9:47:40:d0:
9c:b0:d4:94:9c:b1:b8:8c:7b:7f:f7:68:38:7b:27:
be:ce:19:98:d9:ed:e5:af:91:60:a1:c0:27:32:d5:
da:17:b8:62:f9:ce:36:91:35:8b:f6:29:ad:9f:fa:
03:6e:6f:7d:da:95:e5:0d:9b:60:3d:12:03:cb:63:
a2:4d:61:25:68:c5:bb:f1:7e:da:2e:92:4a:c5:44:
bc:51:38:5c:1c:b9:cb:c1:4d:be:86:b8:59:d3:f7:
96:15:a8:7f:21:06:45:3f:e2:7c:31:12:e0:74:36:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:03:9D:60:42:C5:F8:30:12:54:C3:8C:03:67:FA:22:36:91:77:80
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5c:62:ca:fb:8d:bf:46:c6:0b:f6:b7:50:39:bc:87:64:17:
53:34:95:ca:64:85:09:ee:90:35:cf:90:41:9e:10:62:1e:ac:
a4:74:17:b7:a5:01:22:68:9e:80:3b:b4:57:03:a9:a2:55:de:
a8:7a:2e:ca:3b:f0:95:41:ea:06:87:5f:31:0c:4c:cc:5e:1e:
f0:b5:c1:41:a7:d3:f5:e7:75:79:c1:61:b4:e4:b2:6a:df:23:
06:85:70:b0:f1:fa:dc:f4:b8:f5:e6:0e:d9:16:28:bb:a8:78:
44:5c:6c:6c:80:ca:84:a2:bf:9b:17:1f:be:d5:f7:9e:85:a0:
c4:0e:57:22:92:aa:a6:dc:89:2c:4f:1f:e6:7b:93:d3:11:8f:
5b:c6:2e:6c:d1:79:7a:34:de:ea:46:1e:64:16:be:9e:ba:5d:
82:6d:ff:bf:b2:e1:4b:3c:3f:65:61:80:f5:0e:a3:7b:81:4b:
b9:22:c9:99:be:e2:21:fe:cf:66:3a:4b:b8:df:29:de:1d:cb:
ba:a2:f3:d9:b9:2a:bc:82:14:1f:a8:ad:93:de:ca:94:b6:97:
29:81:9e:6a:e2:1a:0e:20:e1:ac:15:ff:00:98:3f:d6:c0:69:
2c:9b:b6:85:c7:49:a5:b0:12:b5:40:6b:b8:4f:30:4d:25:ad:
7f:fc:29:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:58:48 2025 by rpki-client